Skip to content

ci: 👷 Update Java setup and GitHub Script actions - #77

Merged
oxspan merged 3 commits into
developfrom
dependabot/github_actions/develop/actions-64b7aa60e1
Nov 12, 2026
Merged

oxspan merged 3 commits into
developfrom
dependabot/github_actions/develop/actions-64b7aa60e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026 •

Copy link
Copy Markdown
Contributor

Why

Update the Java setup and GitHub Script actions while preserving the artifact API required by local act runs.

Changes

  • Update actions/setup-java from v6.1.0 to v6.2.0 and actions/github-script from v8 to v9.0.0, pinned to full commit SHAs.
  • Keep the three act-only artifact uploads on v4.6.2. Hosted uploads already use v7 and remain unchanged.
  • Synchronize the branch with current develop, including SQL grouping.

Validation

  • act v0.2.97 workflow validation passed; both workflows and reusable job graph resolve.
  • Ran the actual comment script with v9's pinned execution function on Node24 across seven scenarios, including creation/update, stale/closed PRs, missing/oversized reports and report content treated as text. External GitHub API calls were replaced locally.
  • Confirmed upstream tags/SHAs, Node24 runtime and retained input compatibility.

Full local act execution was unavailable because Docker Desktop's Linux engine/WSL integration is unavailable. No environment settings were changed. Latest-commit hosted CI must pass before merge. The develop workflow skips Windows packaging and scale/release jobs; they are not claimed as validated by this PR run.

Compatibility and risks

Existing workflow permissions, conditions, script content and artifact inputs are unchanged. Local act upload compatibility keeps its existing v4 pin; the v9 script uses the supplied GitHub client and Node built-ins, avoiding the removed CommonJS package import and injected-name conflicts.

Bumps the actions group with 3 updates in the / directory: [actions/setup-java](https://github.com/actions/setup-java), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/github-script](https://github.com/actions/github-script).


Updates `actions/setup-java` from 6.1.0 to 6.2.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@b843ebf...77dd5b2)

Updates `actions/upload-artifact` from 4.6.2 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4.6.2...cf430e0)

Updates `actions/github-script` from 8.0.0 to 9.0.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@ed59741...3a2844b)

---
updated-dependencies:
- dependency-name: actions/setup-java
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Nov 11, 2026
@oxspan oxspan changed the title ci: bump the actions group across 1 directory with 3 updates ci: 👷 Update Java setup and GitHub Script actions Nov 12, 2026
@oxspan
oxspan merged commit 609294f into develop Nov 12, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/develop/actions-64b7aa60e1 branch November 12, 2026 06:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant